Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.mft
File:                     tNQViTJWcWZLLGBPEt4EdX4uzNs.mft (raw, json)
Hash identifier:          vi0z0Zi0/6PH3Jtpsue5o2bdZV/EbhimUi8DUXKK2f4=
Subject key identifier:   62:48:77:8B:AD:C1:80:39:06:F3:16:D1:29:0B:3A:52:58:2A:88:CA
Authority key identifier: B4:D4:15:89:32:56:71:66:4B:2C:60:4F:12:DE:04:75:7E:2E:CC:DB
Certificate issuer:       /CN=A916432A/serialNumber=B4D41589325671664B2C604F12DE04757E2ECCDB
Certificate serial:       0812
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNQViTJWcWZLLGBPEt4EdX4uzNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.mft
Manifest number:          0807
Signing time:             Sat 04 Apr 2026 20:55:50 +0000
Manifest this update:     Sat 04 Apr 2026 20:55:50 +0000
Manifest next update:     Sat 11 Apr 2026 20:55:50 +0000
Files and hashes:         1: tNQViTJWcWZLLGBPEt4EdX4uzNs.crl (hash: bTt0v6XUT6X8CE2BkfFPoVtqV8RuIJWlPxg0NCeLqcA=)
                          2: 67CD2004292211EB8A9B3D73C4F9AE02.roa (hash: tcE4gvT48rVkQCBAi3c3JCe7vlGJ11O5lP9n2KM3sUE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.crl
                          rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNQViTJWcWZLLGBPEt4EdX4uzNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:55:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2066 (0x812)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916432A, serialNumber=B4D41589325671664B2C604F12DE04757E2ECCDB
        Validity
            Not Before: Apr  4 20:55:50 2026 GMT
            Not After : Apr 11 20:55:50 2026 GMT
        Subject: CN=69d17ad6-aa37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:57:41:b8:ae:62:28:76:c6:af:b4:97:a3:8c:
                    92:ba:3e:c8:7a:c0:d3:e9:f5:f2:71:3a:64:63:35:
                    e9:80:9f:57:91:fd:b1:88:33:d7:58:04:70:26:db:
                    31:4c:a9:ef:b3:b1:c7:54:8e:e0:b9:d0:c2:db:e4:
                    c5:5e:19:57:ee:da:cf:f0:8d:7a:b4:1d:36:7e:c2:
                    94:41:9f:f2:b0:b1:f6:73:2b:33:0d:01:0d:b7:45:
                    ec:98:23:19:17:7d:e8:61:7b:37:8f:c4:21:77:06:
                    54:b5:f7:ce:ca:9f:53:00:18:cf:15:7b:73:31:ac:
                    4c:3c:4a:7f:b3:3d:0d:02:88:f8:81:80:64:af:18:
                    2b:a2:56:1b:3a:07:76:83:bf:ff:41:d3:f2:bb:60:
                    92:b7:54:d5:02:cd:51:6e:c8:bb:eb:08:23:24:31:
                    fe:09:12:41:52:eb:04:b2:38:67:76:8d:18:4c:89:
                    72:4b:85:6d:18:e9:25:1c:10:c8:f1:e2:4a:30:f8:
                    17:1f:7d:17:64:f0:33:d7:84:67:e7:dc:dd:b1:a4:
                    d0:33:33:3c:c8:b8:b9:7a:3c:71:2c:0a:de:04:53:
                    e2:95:de:b6:83:f3:4e:71:91:fb:3c:b7:61:6a:2f:
                    9a:cd:d2:9c:95:46:47:68:e5:23:73:62:aa:f3:27:
                    7d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:48:77:8B:AD:C1:80:39:06:F3:16:D1:29:0B:3A:52:58:2A:88:CA
            X509v3 Authority Key Identifier:
                keyid:B4:D4:15:89:32:56:71:66:4B:2C:60:4F:12:DE:04:75:7E:2E:CC:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNQViTJWcWZLLGBPEt4EdX4uzNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:ee:87:e4:8d:f7:72:7a:d2:48:b9:fc:34:c8:54:7d:b9:ee:
         5c:84:ba:56:58:0b:bb:4b:af:d7:ef:5f:a6:68:44:9f:51:c4:
         ab:41:5e:90:21:11:e0:30:d2:90:89:6c:b5:d2:59:79:8a:38:
         98:65:25:c4:7b:f7:37:78:1f:d2:35:4b:0d:bc:78:c6:7b:80:
         bf:ea:ed:40:c5:a2:ae:19:e3:ba:e4:f1:41:29:23:01:2e:d2:
         d7:b4:b2:3c:13:b0:bb:2a:65:c6:68:7e:f0:33:41:e0:22:ec:
         ff:71:83:dc:22:14:2d:24:f7:4b:29:17:6e:00:b0:33:ab:ad:
         17:30:f5:c5:56:77:43:3c:63:15:be:b5:af:50:e0:68:a1:0c:
         b4:9f:0c:1c:f3:50:39:ea:f6:8b:87:bc:f4:a1:58:b9:80:ec:
         a0:cd:3b:15:b0:92:98:bd:27:61:15:2a:86:1f:25:8c:d7:61:
         6e:77:e7:23:2f:52:c2:6f:cf:88:94:d9:5e:b2:a7:5e:65:14:
         74:bd:2f:5e:1e:41:30:4e:08:6b:30:3c:e2:53:42:74:c3:a9:
         9a:cf:2b:2d:c1:ef:f2:cc:2f:df:da:14:5b:28:a5:15:5d:91:
         87:49:d0:02:82:b9:11:02:fb:04:03:3f:8c:84:4a:42:56:c4:
         9f:47:72:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:17 2026 by rpki-client